This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138302e3135312e302f32342d3332203d3e203531313637.roa File: 352e3138302e3135312e302f32342d3332203d3e203531313637.roa (raw, json) Hash identifier: U33WYXiiPTOV2PzSzIZKk6ZGVbEsxj982XwWOnklcVo= Subject key identifier: 8B:81:FD:26:F5:8B:51:F5:5A:E5:71:C3:45:41:D4:7D:CE:0B:D6:FA Certificate issuer: /CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Certificate serial: 16F1E799CF4AAF0B7990C600683BE2CFBE8164B9 Authority key identifier: 09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject info access: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138302e3135312e302f32342d3332203d3e203531313637.roa Signing time: Fri 28 Nov 2025 11:49:19 +0000 ROA not before: Fri 28 Nov 2025 11:44:19 +0000 ROA not after: Fri 27 Nov 2026 11:49:19 +0000 asID: 51167 IP address blocks: 5.180.151.0/24 maxlen: 32 Validation: OK Signature path: rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.mft rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Sun 07 Dec 2025 05:00:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 16:f1:e7:99:cf:4a:af:0b:79:90:c6:00:68:3b:e2:cf:be:81:64:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=097a28f77eb0a4ac354a8ac28754b2a3bbe3a959 Validity Not Before: Nov 28 11:44:19 2025 GMT Not After : Nov 27 11:49:19 2026 GMT Subject: CN=8B81FD26F58B51F55AE571C34541D47DCE0BD6FA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:4b:80:6f:d7:45:1d:c9:c8:ae:99:0d:9a:56: 7c:12:d4:cb:ec:c5:f8:e5:37:33:c9:16:8b:07:89: 16:10:5b:14:5d:af:05:d8:13:48:5e:e7:a6:48:df: 77:38:b8:18:e5:78:1d:fd:f6:0a:dc:6b:6c:3d:5c: 35:f2:0c:5b:da:ea:7e:3b:b7:d0:d4:fe:7d:4b:39: 67:e8:59:86:f1:50:1f:25:c8:47:cb:a3:c4:20:4c: 00:c7:ac:55:8c:48:04:02:fc:0d:f2:bb:00:2d:26: 92:3d:a8:cb:8d:8b:87:fc:fa:1f:85:2c:96:f1:1d: db:54:6b:ed:48:db:c7:e4:fe:60:85:ea:41:f9:28: 49:44:e0:39:2d:dd:3b:13:44:48:f7:39:47:cc:36: 6a:83:8d:86:a5:8b:81:ed:1d:01:a8:6c:73:ec:6f: 54:d4:bb:15:ea:28:2f:58:c4:b7:60:93:fd:08:ea: c8:ab:3a:44:6e:6b:b8:c7:27:7e:72:ca:5c:34:09: a0:14:79:3b:ed:61:17:ae:d2:81:4f:df:3b:37:c9: 19:37:53:d9:cd:22:c6:4d:90:4a:5a:2b:9b:4b:4f: 59:10:15:a4:51:da:2d:33:09:12:64:68:3a:70:9e: 07:dc:02:a3:38:09:ad:bf:40:77:63:6c:48:2c:36: ed:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 8B:81:FD:26:F5:8B:51:F5:5A:E5:71:C3:45:41:D4:7D:CE:0B:D6:FA X509v3 Authority Key Identifier: keyid:09:7A:28:F7:7E:B0:A4:AC:35:4A:8A:C2:87:54:B2:A3:BB:E3:A9:59 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/097A28F77EB0A4AC354A8AC28754B2A3BBE3A959.crl Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/CXoo936wpKw1SorCh1Syo7vjqVk.cer Subject Information Access: Signed Object - URI:rsync://rsync.paas.rpki.ripe.net/repository/fe3708a0-67d5-4ac2-abc4-a332590b99af/177/352e3138302e3135312e302f32342d3332203d3e203531313637.roa X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 5.180.151.0/24 Signature Algorithm: sha256WithRSAEncryption 28:8a:95:6e:94:c7:f6:9e:39:44:99:d5:9d:6d:d8:d8:d7:07: 70:7e:ba:93:43:a4:d9:5d:16:23:70:97:d3:d6:95:8d:8d:60: db:43:63:36:3c:e0:e8:4f:30:73:4a:cb:c0:bb:33:89:33:9a: 33:93:68:97:a1:51:19:e0:00:29:f8:d6:5f:b6:62:9d:52:d0: fd:da:be:81:31:ca:b7:c8:a9:bb:e3:2f:9b:2f:2c:92:1a:25: 52:91:4c:82:4a:0d:61:49:de:65:11:67:84:08:70:30:80:b5: 52:6c:31:73:3c:34:80:b4:26:d1:b1:79:2f:6d:3e:39:3b:0e: ef:3f:bb:b6:72:38:e5:85:76:0b:b0:3f:3e:94:5f:7d:12:ab: cd:0f:7e:f5:33:a8:8c:27:31:3c:a8:c4:ae:54:a4:8d:c0:c8: 15:8b:00:11:56:2e:37:51:30:a9:35:3a:65:69:cb:a0:c0:67: 5c:ae:79:9f:05:ab:72:7c:4c:d3:22:6c:84:ac:54:43:10:94: 3d:60:39:75:a8:56:81:93:67:82:10:4f:b3:49:8e:8e:6f:a5: cb:89:e6:49:fa:33:7a:76:76:eb:5c:d7:50:e8:4b:90:b3:88: c2:c9:28:93:4f:b8:19:fc:a5:fc:73:77:b2:f9:82:8b:c2:7f: 95:cb:5e:8b -----BEGIN CERTIFICATE----- MIIFNjCCBB6gAwIBAgIUFvHnmc9Krwt5kMYAaDviz76BZLkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoMDk3YTI4Zjc3ZWIwYTRhYzM1NGE4YWMyODc1NGIyYTNi YmUzYTk1OTAeFw0yNTExMjgxMTQ0MTlaFw0yNjExMjcxMTQ5MTlaMDMxMTAvBgNV BAMTKDhCODFGRDI2RjU4QjUxRjU1QUU1NzFDMzQ1NDFENDdEQ0UwQkQ2RkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDWS4Bv10UdyciumQ2aVnwS1Mvs xfjlNzPJFosHiRYQWxRdrwXYE0he56ZI33c4uBjleB399grca2w9XDXyDFva6n47 t9DU/n1LOWfoWYbxUB8lyEfLo8QgTADHrFWMSAQC/A3yuwAtJpI9qMuNi4f8+h+F LJbxHdtUa+1I28fk/mCF6kH5KElE4Dkt3TsTREj3OUfMNmqDjYali4HtHQGobHPs b1TUuxXqKC9YxLdgk/0I6sirOkRua7jHJ35yylw0CaAUeTvtYReu0oFP3zs3yRk3 U9nNIsZNkEpaK5tLT1kQFaRR2i0zCRJkaDpwngfcAqM4Ca2/QHdjbEgsNu2vAgMB AAGjggJAMIICPDAdBgNVHQ4EFgQUi4H9JvWLUfVa5XHDRUHUfc4L1vowHwYDVR0j BBgwFoAUCXoo936wpKw1SorCh1Syo7vjqVkwDgYDVR0PAQH/BAQDAgeAMIGYBgNV HR8EgZAwgY0wgYqggYeggYSGgYFyc3luYzovL3JzeW5jLnBhYXMucnBraS5yaXBl Lm5ldC9yZXBvc2l0b3J5L2ZlMzcwOGEwLTY3ZDUtNGFjMi1hYmM0LWEzMzI1OTBi OTlhZi8xNzcvMDk3QTI4Rjc3RUIwQTRBQzM1NEE4QUMyODc1NEIyQTNCQkUzQTk1 OS5jcmwwZAYIKwYBBQUHAQEEWDBWMFQGCCsGAQUFBzAChkhyc3luYzovL3Jwa2ku cmlwZS5uZXQvcmVwb3NpdG9yeS9ERUZBVUxUL0NYb285MzZ3cEt3MVNvckNoMVN5 bzd2anFWay5jZXIwga0GCCsGAQUFBwELBIGgMIGdMIGaBggrBgEFBQcwC4aBjXJz eW5jOi8vcnN5bmMucGFhcy5ycGtpLnJpcGUubmV0L3JlcG9zaXRvcnkvZmUzNzA4 YTAtNjdkNS00YWMyLWFiYzQtYTMzMjU5MGI5OWFmLzE3Ny8zNTJlMzEzODMwMmUz MTM1MzEyZTMwMmYzMjM0MmQzMzMyMjAzZDNlMjAzNTMxMzEzNjM3LnJvYTAYBgNV HSABAf8EDjAMMAoGCCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAG AwQABbSXMA0GCSqGSIb3DQEBCwUAA4IBAQAoipVulMf2njlEmdWdbdjY1wdwfrqT Q6TZXRYjcJfT1pWNjWDbQ2M2PODoTzBzSsvAuzOJM5ozk2iXoVEZ4AAp+NZftmKd UtD92r6BMcq3yKm74y+bLyySGiVSkUyCSg1hSd5lEWeECHAwgLVSbDFzPDSAtCbR sXkvbT45Ow7vP7u2cjjlhXYLsD8+lF99EqvND371M6iMJzE8qMSuVKSNwMgViwAR Vi43UTCpNTplacugwGdcrnmfBatyfEzTImyErFRDEJQ9YDl1qFaBk2eCEE+zSY6O b6XLieZJ+jN6dnbrXNdQ6EuQs4jCySiTT7gZ/KX8c3ey+YKLwn+Vy16L -----END CERTIFICATE-----Generated at Sat Dec 6 12:52:16 2025 by rpki-client